SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2013-4840

Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors.

HIGH 7.8EPSS 2.53%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.53%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors.

CVSS 2.0
7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
2.53% probability · 84th percentile
CISA KEV
Not listed
Affected
h3c/secbladefw · h3c/secpath1000fe · h3c/f1000-e vpn firewall · h3c/s5820 secblade vpn firewall module · h3c/s7500e secblade vpn firewall module · h3c/s9500e secblade vpn firewall module · h3c/sr66 gigabit firewall module · h3c/sr88 firewall processing module · hp/secbladefw · hp/secpath1000fe · hp/10500\/7500 advanced vpn firewall module · hp/12500 vpn firewall module · hp/5820 vpn firewall module · hp/6600 firewall processing rtr module · hp/8800 firewall processing module · hp/9500 vpn firewall module · hp/s1000-e vpn firewall appliance
Source
hp-security-alert@hp.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.